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KEY SERVER 



Authenticate the host 



Allocate a unique DR key for the host 



1.0 io 



Forward the group key and the DR key to the host 



[ 



Forward the DR key to the RP 



END 
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HOST 



Obtain the DR key from the key server 



Send the DR key to the DR 



Send a join request to the DR 



>6 
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END 
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Receive the DR key from host 



Receive the join request from host 



Generate a tag using the DR key 



Generate a nonce 



— ■ 

Generate-a tagged PDvl join message including the tag and the nonce 
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Encrypt the tagged PIM join message using the 
equal opportunity key according to IPsec AH 
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Forward the tagged PIM join message upstream toward the RP 
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END 
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INTERMEDIATE PIM ROUTER 



Receive the tagged PIM join message 
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Authenticate the tagged PIM join message using the 
equal opportunity key according to IPsec AH 



\iO ^/^thentic?^ ^O'^ 



Detennine whether the router is already joined to the shared tree 



^^-^Iready joined? 

k 



Establish appropriate multicast routes for 
forwarding multicast packets downstream 
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Forward the tagged PIM join message upstream toward the RP 



^ END ^ 
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Store a copy of the tagged PIM join message 



Fbrwaxd the tagged PIM join message upstream toward the RP 



1 Wait for an explicit acknowledgment from the RP 



Receive the explicit acknowledgment from the RP 



Compare the explicit acknowledgment to the stored copy of the tagged PIM join message 



Determine that the explicit acknowledgment conesponds to the tagged PIM join message 
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\L 



Establish appropriate multicast routes for forwarding multicast packets downstream 



1 
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Receive the tagged PIM join message 



I Authenticate the tagged PIM join message using the 
\ equal opportunity key according to IPsec AH 



If! 




Search for the DR key associated with the host 



4/ 



Authenticate the tagged PIM join message 
using the DR key associated with the host 



^uthenticr> 
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Establish appropriate multicast routes for forwarding multicast packets to the host 



Send an explicit acknowledgment downstream toward the host | ^ | S 



-^>END 
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